Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/3133312e3130302e302e302f32322d3234203d3e203432343733.roa
File:                     3133312e3130302e302e302f32322d3234203d3e203432343733.roa (raw, json)
Hash identifier:          cJGJjNmY0iZIZCrjCwbfmPvWnq7aEhNwzm+6YHIMGwY=
Subject key identifier:   C7:22:FA:BA:33:14:1F:34:0C:EC:6F:F5:27:D4:17:7E:B2:BD:02:75
Certificate issuer:       /CN=CC7F59E10868BFB993AAD4E7AC6585D3748F2855
Certificate serial:       2B2145FBD4C6D54AC4325EC982E17293BCCA788C
Authority key identifier: CC:7F:59:E1:08:68:BF:B9:93:AA:D4:E7:AC:65:85:D3:74:8F:28:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/3133312e3130302e302e302f32322d3234203d3e203432343733.roa
Signing time:             Tue 05 Mar 2024 17:45:56 +0000
ROA not before:           Tue 05 Mar 2024 17:40:56 +0000
ROA not after:            Tue 04 Mar 2025 17:45:56 +0000
asID:                     42473
IP address blocks:        131.100.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:21:45:fb:d4:c6:d5:4a:c4:32:5e:c9:82:e1:72:93:bc:ca:78:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC7F59E10868BFB993AAD4E7AC6585D3748F2855
        Validity
            Not Before: Mar  5 17:40:56 2024 GMT
            Not After : Mar  4 17:45:56 2025 GMT
        Subject: CN=C722FABA33141F340CEC6FF527D4177EB2BD0275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:45:cb:99:d3:23:0b:b3:df:c2:cb:2e:f5:
                    51:70:26:a3:5f:87:a8:b7:21:b8:fe:3d:bf:f4:3f:
                    46:1a:b3:85:7f:d8:69:c3:92:b7:23:93:f2:1d:51:
                    f8:f8:35:aa:2b:8a:57:2f:c7:36:8e:95:47:d0:ef:
                    79:b5:89:d7:92:93:ed:eb:53:14:05:5a:ee:09:d9:
                    07:7e:16:13:6e:5e:bf:7d:8b:4c:d7:08:ea:cf:e0:
                    90:97:cf:18:ce:d3:9a:cd:5a:ff:ef:a5:cb:09:da:
                    fe:a0:78:70:ba:35:16:36:c4:ea:cb:9f:f4:8d:7e:
                    50:e6:03:fa:3d:7a:5b:48:9d:06:0b:50:28:91:f6:
                    4e:1c:2d:f0:8c:b1:75:14:69:c6:13:ec:57:8b:c2:
                    0d:d7:56:ca:b7:56:56:54:bb:7e:f3:cd:95:f0:fd:
                    97:c2:5a:4a:db:c1:db:d0:c1:46:f5:d0:df:e5:1d:
                    90:a3:04:ef:ce:13:43:44:28:00:26:d6:b4:2c:5e:
                    67:8f:ae:9a:71:b3:20:50:27:0d:c4:52:1b:f1:c4:
                    6a:03:b0:c6:39:c8:df:a1:5f:de:bb:0d:04:c5:4a:
                    2a:8b:7f:e7:56:3a:3d:cc:29:fa:7d:db:9f:53:d1:
                    82:b4:3c:bd:0c:03:cb:36:46:60:b6:5c:a7:05:e1:
                    e7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:22:FA:BA:33:14:1F:34:0C:EC:6F:F5:27:D4:17:7E:B2:BD:02:75
            X509v3 Authority Key Identifier:
                keyid:CC:7F:59:E1:08:68:BF:B9:93:AA:D4:E7:AC:65:85:D3:74:8F:28:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/3133312e3130302e302e302f32322d3234203d3e203432343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:a3:15:19:d9:13:ac:77:bc:23:1a:6e:43:03:dc:11:d3:7a:
         04:4b:9c:8c:43:e2:19:61:ad:e8:e9:28:1e:d1:22:fc:7b:5a:
         5d:76:e8:a7:a6:f2:f5:83:2f:94:ef:c6:88:ea:15:ba:90:c7:
         1d:40:b3:ad:87:2a:ea:26:00:cb:6f:29:d1:aa:68:d5:a4:00:
         bf:ef:ae:ef:ae:b5:59:f9:53:51:a0:81:7b:ec:46:e3:42:73:
         62:11:9e:0e:41:91:bb:de:a5:c3:41:0c:42:12:d9:85:7b:e1:
         44:b6:a6:4e:e7:41:a1:8a:e1:27:db:c5:c5:b0:fc:24:9a:26:
         e7:9a:e1:a7:90:0f:4a:16:ef:cf:d0:f4:4e:d3:58:ec:e2:36:
         0a:f8:e4:67:d9:81:41:db:77:0b:3b:9b:fc:a1:d8:f7:ec:46:
         cb:3f:6c:a5:f7:db:18:08:5e:13:51:51:8f:5f:45:a6:b5:25:
         de:7e:17:60:3f:4c:fc:5c:64:b7:a1:01:16:bd:1b:89:88:46:
         f9:25:8e:2a:e7:ae:be:c6:ca:75:6e:2e:58:2b:56:e7:01:f4:
         b2:ed:a9:3a:bc:66:e3:87:38:09:fe:71:5b:ae:fc:67:ce:74:
         b7:35:f8:f8:7d:24:a1:42:5b:24:b1:b4:c5:27:65:2b:9e:1b:
         bf:8b:4f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org